13.4 Email scanning
177
Figure13.9 Settingsfor SMTP and POP3 scanning
Thequarantine subdirectory under the WinRoute directory is used for the quarantine
(the typical path is C:\Program Files\Kerio\WinRoute Firewall\quarantine)
Messages with untrustworthy attachments are saved to this directory under names
which are generated automatically by WinRoute. Each filename includes information
about protocol, date, time and the connection number used for transmission of the
message.
•Prepend subject message with text — use this option to specify a text to be attached
before the subject of each email message where at least one infected attachment is
found. This text informs the recipient of the message and it can be also used for
automatic message filtering.
Note: Regardless of what action is set to be taken, the attachment is always removed and
a warning message is attached instead.
Use the TLS connections section to set firewall behavior for cases where both mail client and
the server support TLS-secured SMTP or POP3 traffic.
In case that TLS protocol is used, unencrypted connection is established first. Then, client
and server agree on switching to the secure mode (encrypted connection). If the client or the
server does not support TLS, encrypted connection is not used and the traffic is performed in
a non-secured way.
If the connection is encrypted, firewall cannot analyze it and perform antivirus check for
transmitted messages. WinRoute administrator can select one of the following alternatives: